How to tighten client security?

I have setup a SBS 2003 server with a domain and 17 client computers. I used the SBS wizard to att the computers to the domain, however users are still able to install software and perform other tasks in their computers.

What is the best way to tighten security on client computers so that users do not have privileges to install additional software?

Its called using Group Policy (GPO), utilizing the Software Restriction Policies.
Using Software Restriction Policies to Protect Against Unauthorized Software
http://technet.microsoft.com/en-us/library/bb457006.aspx

You definately want to create Group Policies, but also, if you want to stop users from downloading and installing software and music, create a file screen. You can select what type of files you don't want users to install or download such as: mp3,wav,exe, etc...

MotoCrazy... you generally don't use a stand-alone version of ISA server with SBS because it's included in the premium version and the cost to upgrade to that is about a third of the price. But that's not really the issue here. glopezz wants to restrict software installation not Internet access.

The recommendations for instituting a Software Restriction Policy are the way to go.

Featured Post

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

If you get continual lockouts after changing your Active Directory password, there are several possible reasons. Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.

Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message. In the To field, type your recipient's fax number @efaxsend.com.
You can even send a secure international fax — just include t…